$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa File: d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa (raw, json) Hash identifier: YK0E5G7HqOSLsv/T+y83uKG8w1sR8o9rFz0gUuXRFoY= Subject key identifier: 35:09:68:9F:0B:9C:14:6B:4C:D4:07:0D:CC:DD:4E:8D:76:56:0D:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48D46B9BD51DF98ED8D92B74C24321D23B530623 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa Signing time: Mon 20 Jul 2026 01:10:04 +0000 ROA not before: Mon 20 Jul 2026 01:10:04 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 18.96.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d4:6b:9b:d5:1d:f9:8e:d8:d9:2b:74:c2:43:21:d2:3b:53:06:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 20 01:10:04 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=cbfcfabee8385d2ddaaf39275071883ceb990f61355757066f7fea43882066b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:bf:b4:38:1e:f5:34:30:6c:48:1b:8f:bb: 7f:fe:a5:fe:1c:b1:56:49:98:46:63:55:93:71:f5: 02:15:fe:83:c8:d5:d6:4d:df:39:78:6e:4b:3b:97: 7b:20:0d:95:17:2f:d9:03:5d:2b:c1:b8:48:ae:e5: 28:b1:f3:57:a6:56:86:5e:01:86:d5:24:96:66:77: 3d:d8:9c:d7:90:26:ce:23:f4:c1:71:5d:91:ec:be: f1:88:0b:ca:20:81:d2:a5:14:05:b8:e1:aa:7c:30: 49:84:0a:f6:b4:df:73:6f:40:56:bf:d0:9f:53:8b: 81:81:88:29:77:ad:b9:39:cc:ca:a6:12:e9:4e:84: fd:df:55:79:51:5d:d7:30:cc:90:61:6a:9b:64:1d: 06:6c:6b:19:f6:85:2d:6f:1f:7b:2e:0a:af:bb:fc: df:7e:ca:c2:8a:04:dc:35:42:dd:02:9d:b1:ef:54: 9a:04:d5:81:60:92:53:b9:eb:fc:b4:a3:03:cb:d1: 9b:be:e5:2f:f1:09:f7:1c:87:cf:a0:9b:f1:22:4d: a2:3e:b7:1b:bc:70:25:c2:8f:a7:09:d2:89:4f:a6: 6f:22:59:bb:f5:13:2f:34:4e:a8:af:cb:74:85:b9: a1:c1:6d:06:0c:b0:e3:74:69:7e:0b:19:07:c4:9b: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:09:68:9F:0B:9C:14:6B:4C:D4:07:0D:CC:DD:4E:8D:76:56:0D:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.96.0.0/14 Signature Algorithm: sha256WithRSAEncryption 5c:c3:49:ce:e4:a8:09:aa:db:d6:90:10:3f:a0:9a:ff:2f:5e: e9:0a:12:6f:39:da:97:da:7d:9a:ba:35:bb:00:5c:e8:e8:5c: 95:a1:64:34:35:92:37:2f:75:fd:b3:9b:e5:62:77:ea:03:c8: f9:f8:24:0e:2f:88:56:b1:e2:3f:1f:85:6c:1e:92:97:ce:6b: 4b:3f:5e:6b:44:9d:53:bb:b1:4b:b8:80:dc:45:35:d5:cf:60: f6:fd:23:f6:35:4c:47:d8:c8:91:bb:16:68:16:60:a0:22:e6: 51:93:b9:1a:ee:30:ee:de:0a:3d:c7:af:8f:23:b2:48:e7:7b: f3:d5:33:50:e6:40:f5:db:31:19:0e:9f:40:40:c6:b3:46:5a: ed:f7:a5:c6:38:70:8f:92:59:8e:b5:c9:14:ed:a9:fc:50:cd: 46:0a:5c:a6:04:71:99:7b:01:77:7f:78:8b:bb:1d:cc:83:c4: 52:cc:02:73:3f:fc:af:08:45:82:b1:ad:cc:a0:31:39:1f:3e: 5a:9b:45:20:ac:fd:81:70:2b:69:91:3f:ea:69:ba:c4:ab:74: 11:b5:8f:71:05:69:de:20:7b:4f:62:90:18:fc:d6:a3:5f:e5: ea:9d:f2:7a:f9:ec:bb:cd:ee:d5:8d:f4:5e:a9:4b:16:6c:dd: f9:19:04:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSNRrm9Ud+Y7Y2St0wkMh0jtTBiMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzIwMDExMDA0WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmZjZmFiZWU4Mzg1ZDJkZGFhZjM5Mjc1MDcxODgzY2Vi OTkwZjYxMzU1NzU3MDY2ZjdmZWE0Mzg4MjA2NmIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL2b+0OB71NDBsSBuPu3/+pf4csVZJmEZjVZNx9QIV/oPI 1dZN3zl4bks7l3sgDZUXL9kDXSvBuEiu5Six81emVoZeAYbVJJZmdz3YnNeQJs4j 9MFxXZHsvvGIC8oggdKlFAW44ap8MEmECva033NvQFa/0J9Ti4GBiCl3rbk5zMqm EulOhP3fVXlRXdcwzJBhaptkHQZsaxn2hS1vH3suCq+7/N9+ysKKBNw1Qt0CnbHv VJoE1YFgklO56/y0owPL0Zu+5S/xCfcch8+gm/EiTaI+txu8cCXCj6cJ0olPpm8i Wbv1Ey80Tqivy3SFuaHBbQYMsON0aX4LGQfEm+GdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNQlonwucFGtM1AcNzN1OjXZWDSUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1ZmY2NjNjLTY1NzctNGM0Mi05Yjc3LWVlNWNlZjVjYzA1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwISYDANBgkqhkiG9w0BAQsFAAOCAQEAXMNJzuSoCarb1pAQP6Ca/y9e6QoS bznal9p9mro1uwBc6OhclaFkNDWSNy91/bOb5WJ36gPI+fgkDi+IVrHiPx+FbB6S l85rSz9ea0SdU7uxS7iA3EU11c9g9v0j9jVMR9jIkbsWaBZgoCLmUZO5Gu4w7t4K PcevjyOySOd789UzUOZA9dsxGQ6fQEDGs0Za7felxjhwj5JZjrXJFO2p/FDNRgpc pgRxmXsBd394i7sdzIPEUswCcz/8rwhFgrGtzKAxOR8+WptFIKz9gXAraZE/6mm6 xKt0EbWPcQVp3iB7T2KQGPzWo1/l6p3yevnsu83u1Y30XqlLFmzd+RkE/w== -----END CERTIFICATE-----Generated at Fri Jul 24 07:01:47 2026 by rpki-client